Privacy Policy

Last Updated: January 2025

1. Introduction

Fitness 16 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with the Kenya Data Protection Act (DPA) 2019. This policy applies to members at our Juja and Ruaka locations.

2. Data We Collect

  • Required Identification: Name (First and Last) and Phone Number (required for account login and authentication).
  • Optional Info: Email address.
  • Gym Preferences: Home gym location preference (Juja or Ruaka).
  • Fitness Data: Workout logs (exercises, sets, reps, weights), weight tracking data, and fitness goals.
  • Activity History: Check-in history at gym locations.
  • Financial Data: Payment history related to M-Pesa transactions.
  • Communication: Feedback or inquiries submitted via our platforms.

3. How We Use Your Data

  • Authentication: Secure login via SMS verification.
  • Management: Membership administration and facility access.
  • Payments: Processing transactions through Safaricom M-Pesa.
  • Tracking: Providing you with workout history and progress visualization.
  • Notifications: Sending essential alerts such as membership expiry reminders.
  • Improvement: Analyzing aggregated data to improve our gym services and equipment.

4. Third-Party Sharing

We only share data with essential service providers:

  • Safaricom M-Pesa: For secure payment processing.
  • SMS Gateway Providers: To deliver login verification codes.
  • Cloud Hosting: For secure data storage and app performance.

5. Your Rights (Kenya DPA 2019)

As a data subject in Kenya, you have the right to:

  • Access and receive a copy of your personal data.
  • Request the deletion of your account and all associated data.
  • Export your data in a structured format.
  • Withdraw consent for data processing at any time.

6. Data Retention

We retain your personal data only as long as your account is active. To comply with local regulations and ensure data hygiene, accounts that have been inactive for more than 2 years will be automatically deleted along with all associated personal information.

7. Contact Us

If you have questions about this policy or wish to exercise your data rights, please contact us at 0793466828 or 0726050613.